Study 33 CFR 105.205 by classifying every FSO duty into an assignable execution layer and a retained accountability layer. Then drill the document cycle — FSA, FSP, annual audit, exercises — and the three-audience MARSEC reporting rule using paper scenarios scored against a written rubric.
What 'Ensure' Actually Obligates When You Assign the Work
Section 105.205(a)(3) lets the FSO assign security duties to other facility personnel, but the FSO retains responsibility for those duties. Every paragraph (c) item should therefore be read as an accountability the FSO owns, not necessarily a task the FSO personally performs.
Read every 'ensure' clause through this two-layer lens. 'Ensure that regular security inspections of the facility are conducted' does not require the FSO to walk each inspection; it requires establishing that inspections happen, that they follow the approved Facility Security Plan, and that their results reach the FSO. The practical study move is to build a two-column map for all nineteen paragraph (c) items: who may execute the work, and which accountability remains with the FSO regardless of who executes it.
Scenario: a gate guard observes an unescorted visitor in a restricted area and writes a log entry. A plausible mistake is treating the guard's entry as the completed duty and moving on. The stronger decision is for the FSO to verify that the occurrence is recorded and reported to the owner or operator as paragraph (c)(8) requires, and that any follow-up is consistent with the approved plan. Why it matters: the record and the escalation are both FSO obligations even though the observation itself was delegated.
FSO and Vessel Security Officer: Distinct Roles with Formal Touchpoints
The FSO is the designated facility-side role under 33 CFR Part 105; vessel security is a separate function with its own officer. The roles meet formally through Declarations of Security and through drills and exercises conducted with vessels.
Part 105 builds three specific touchpoints between the roles. First, the FSO ensures execution of any required Declarations of Security with Masters, Vessel Security Officers, or their designated representatives (paragraph (c)(11)). Second, when requested, the FSO ensures VSOs receive help confirming the identity of visitors and service providers seeking to board the vessel through the facility (paragraph (c)(15)). Third, FSO qualification knowledge includes conducting security drills and exercises with vessels and assessing them (paragraphs (b)(2)(xiii) and (b)(2)(xiv)). Keep the facility/vessel boundary clean: these are cooperation duties, not shared authority.
Scenario: during a joint drill, someone asks the FSO to approve a vessel-side security measure. A plausible mistake is blurring the roles and treating the facility designation as covering vessel decisions. The better decision is to confirm what the Declaration of Security requires each party to attest, keep facility records facility-side, and route vessel-side questions to the vessel's own security officer. To drill this boundary on paper, write short exchanges in which the same request could plausibly reach both roles, then label which sentences belong to the FSO's part 105 duties and which belong to the vessel side — treating the FSO designation and any vessel-side security credential as separate things.
FSA, FSP, Annual Audit, and Exercises: Sequencing the Document Cycle
The cycle runs: the Facility Security Assessment informs the Plan; the Plan goes to the COTP for approval; an annual audit tests both; findings trigger updates as needed; exercises under § 105.220 validate implementation. Each document has a distinct purpose.
Paragraph (c) assigns each stage to the FSO: ensure the FSA is conducted, ensure development and implementation of the FSP, ensure an annual audit is conducted and that the FSA and FSP are updated if necessary, and ensure the FSP is exercised per § 105.220. The change trap sits in paragraph (c)(17): the FSP is submitted to the cognizant COTP for approval, and plans to change the facility or facility infrastructure must be submitted before amending the FSP. Approval and amendment are sequenced by the rule, not left to preference.
Worked scenario: your facility plans to renovate a pier that access-control provisions in the FSP depend on. A plausible mistake is completing construction first and then filing a revised FSP as routine maintenance. The better decision is to submit the change plans to the COTP prior to amending the FSP, so the approved plan and the physical facility never diverge. Why it matters: an FSP that no longer matches the facility undermines every downstream duty — inspections, drills, and audit findings all reference a plan that no longer describes reality.
| Element | What it is | FSO's paragraph (c) duty | Distinction to hold onto |
|---|---|---|---|
| FSA | Facility Security Assessment | Ensure it is conducted | Feeds the plan; it is an input, not the plan itself |
| FSP | Facility Security Plan | Ensure development, implementation, and COTP submission | The approved operating document; amendments follow change plans |
| Annual audit | Periodic review of the system | Ensure it is conducted; update FSA/FSP if necessary | Tests existing documents; a finding is a trigger, not automatic rewrite |
| Exercises | Plan validation under § 105.220 | Ensure the FSP is exercised accordingly | Validates implementation; separate from the audit's paper review |
| Facility changes | Physical or infrastructure changes | Submit change plans to the COTP before amending the FSP | Sequenced: approval context first, then plan amendment |
Qualification Knowledge: The (b)(1) Baseline Versus the 'As Appropriate' List
Paragraph (b)(1) names six knowledge areas the FSO needs through training or equivalent job experience. Paragraph (b)(2) adds a longer list of topics the FSO must know and be trained in 'as appropriate,' from threat recognition to TWIC requirements.
Treat paragraph (b)(1) as the operating baseline, because each item maps to a paragraph (c) duty: security organization of the facility; general vessel and facility operations and conditions; vessel and facility security measures, including the meaning and requirements of the different MARSEC Levels; emergency preparedness, response, and contingency planning; security equipment and systems and their operational limitations; and methods of conducting audits, inspections, control, and monitoring techniques. When you study a (c) duty, trace it back to whichever baseline item supports it.
Paragraph (b)(2) describes applied breadth rather than daily operations: relevant international and domestic laws and regulations; roles of local, State, and Federal law enforcement; security assessment methodology; instruction techniques for security training; handling sensitive security information; current threats and patterns; recognizing dangerous substances and devices and suspicious behavior; techniques used to circumvent security measures; physical searches and non-intrusive inspections; drills and exercises including with vessels; assessing those drills; and TWIC requirements. Study these as behaviors you could explain or demonstrate, not as vocabulary to recognize.
- (b)(1) baseline: six areas, satisfied through training or equivalent job experience
- (b)(2) qualifier: 'as appropriate' — depth scales with the facility's context
- Linkage habit: connect each (b) topic to at least one (c) responsibility it supports
- TWIC appears three ways: the FSO must maintain one, know the requirements, and ensure the program is implemented
MARSEC Level Changes: Three Audiences, Three Separate Duties
When MARSEC attainment changes, the rule sets distinct audiences: record and report the change to the owner or operator and the cognizant COTP, and brief all facility personnel on changes in security conditions. Knowing the Levels is a separate baseline duty.
Separate three obligations that sit close together in the text. Paragraph (b)(1)(iii) requires understanding the meaning and requirements of the different MARSEC Levels — what each Level demands of security measures. Paragraph (c)(14) requires recording and reporting changes in MARSEC attainment to the owner or operator and the cognizant COTP. Paragraph (c)(18) requires that all facility personnel are briefed on changes in security conditions. A response that satisfies one of these does not automatically satisfy the others; each has its own audience and its own record.
Worked scenario: the COTP raises the MARSEC Level for your area. A plausible mistake is posting an internal notice for facility staff and considering the duty complete. The better decision walks the full sequence: record the change, report it to both the owner or operator and the COTP, brief personnel on the changed security conditions, and confirm the plan's measures for that Level are actually in effect. Why it matters: the rule distributes information to oversight, ownership, and operations simultaneously, and each distribution is independently required.
A Paper Exercise: Carrying One Audit Finding to Closure
Run a closed-loop paper drill: pick one audit finding and carry it to closure on paper. Expected observations are a named delegate, a retained-responsibility note, an update trigger, a plan-consistency check, and a complete reporting list.
Setup: write a plausible finding such as 'gate inspection logs are incomplete for two months this year.' Then draft, in five steps: (1) assign a corrective action to a named person; (2) note that responsibility for the duty remains with the FSO under 105.205(a)(3); (3) state the audit-to-update trigger — does this finding require updating the FSA or FSP per paragraph (c)(3), or none; (4) check whether the corrective action keeps the FSP consistent with the physical facility, invoking paragraph (c)(17) if infrastructure changes; (5) list the audiences who must hear the outcome, including the owner or operator, and any briefing of personnel.
Score your completed drill against this five-point self-check rubric: delegation is named without transferring responsibility; the update trigger is explicitly decided, not left open; FSP-to-facility consistency was checked; records are referenced to the part 105 recordkeeping requirements; and the reporting/briefing audiences are complete. Four or five points indicates a solid learning milestone; anything lower shows which step to re-drill. These scores measure practice progress only — they are learning milestones, not predictions of any exam outcome.
A Preparation Sequence and Concrete Readiness Checks
Work in four passes: map paragraph (c) duties; classify each as assignable execution or retained accountability; drill the document cycle against the table above; then run timed paper scenarios scored against the audit-closure rubric from the exercise section.
A realistic adaptable sequence: Pass 1, read § 105.205 straight through and produce the two-column duty map — one sitting, revised over several days. Pass 2, study part 105's structure enough to place the FSA, FSP, audit, and § 105.220 exercises in order, using the cycle table as your skeleton. Pass 3, drill the role boundaries: write one DoS-coordination scenario and one MARSEC-change scenario per study session, always naming every audience. Pass 4, run the audit-closure paper exercise weekly and re-score yourself; adjust time on whichever rubric point stays weakest.
Readiness checks before you consider the topic covered: you can list the six (b)(1) knowledge areas from memory and attach a (c) duty to each; you can classify any paragraph (c) item as delegable in execution while retained in accountability; you can name both MARSEC reporting audiences plus the personnel briefing without prompting; you can state the correct order for facility changes and FSP amendment; and you can explain what a Declaration of Security coordinates between facility and vessel sides. One administrative note: procedural details about designation and plan approval are administered by the Coast Guard — its ISPS and MTSA page (dco.uscg.mil/ISPS-MTSA) is the issuer entry point for those specifics.
- Pass 1: build the delegation-versus-accountability map for all paragraph (c) duties
- Pass 2: sequence FSA → FSP → annual audit → § 105.220 exercises → updates
- Pass 3: drill role-boundary and MARSEC-reporting scenarios with named audiences
- Pass 4: weekly audit-closure paper exercise scored against the five-point rubric
- Check yourself against the five readiness statements, not against a predicted score
References and further reading
Use these references to explore the concepts and check the latest information from the relevant organizations.